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• DTE Energy crews worked to restore power to 100,000 customers around Detroit April 14 
after an April 12 storm producing strong winds knocked out electricity. - WDIV 4 Detroit 
(See item 1) 

• The U.S. Department of Justice unsealed an indictment against nine individuals for 
allegedly being involved in a criminal organization that used the Zeus banking trojan to 
steal millions of dollars. - Softpedia (See item 7 ) 

• Police arrested and charged a suspect believed to be responsible for opening fire and killing 
three individuals April 13 outside of the Jewish Community Center of Greater Kanas City, 
then again outside the Village Shalom Jewish retirement community in Overland Park. - 
Associated Press (See item 30 ) 

• A 5-alarm fire April 12 at a commercial building in Berkeley, California, destroyed or 
damaged several businesses, knocked out power to 1,500 PG&E customers, and led to the 
evacuation of nearby businesses and residents. - KGO 7 San Francisco (See item 32 ) 
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Energy Sector 



1. April 14, WD1V 4 Detroit - (Michigan) DTE: 100,000 customers without power. 
DTE Energy crews worked to restore power to 100,000 customers around Detroit April 
14 after an April 12 storm produced strong winds and knocked out electricity. 

Source: http://www.clickondetroit.com/weather/dte-60000-customers-without-power- 
after-spring-storm/25455788 

2. April 12, Clarksburg Exponent Telegram - (West Virginia) Antero Resources shuts 
down well pad after water tanks rupture. A pair of water production tanks ruptured 
April 11, prompting Antero Resources to shut down its Marsden well pad in the Town 
of West Union in West Virginia. Authorities reported that the spill was fully contained 
and the cause of the rupture is under investigation. 

Source: http://www.theet.com/news/local/antero-resources-shuts-down-well-pad-after- 
water-tanks-rupture/article 6bl lbbea-clf9-l Ie3-992f-0019bb2963f4.html 

3. April 12, Forum of Fargo-Moorhead - (North Dakota) 560-barrel pipeline leak 
reported south of Medora. Continental Resources reported that a pipeline leaked 
about 560 barrels of production fluid near Medora into dry drainage, with some 
reaching flowing drainage. Approximately 100 barrels were recovered April 12 while 
inspectors remained on site to test the water and soil. 

Source: http://www.inforum.com/event/article/id/432002/ 

4. April 12, KSAT 12 San Antonio - (Texas) Fuel from south-side refinery spills into 
S.A. River. About 1,100 gallons of fuel spilled April 11 when a Calumet-owned 
refinery plant in San Antonio was transferring jet fuel to a rail truck. Authorities 
reported that less than 100 gallons of the spilled fuel leaked into the San Antonio River 
April 12. 

Source: http://www.ksat.com/news/fuel-from-southside-plant-spills-into-sa- 
river/25449818 
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Chemical Industry Sector 

5. April 14, WBBJ 7 Jackson - (Tennessee) Homes in Henry Co. evacuated after 
anhydrous ammonia spill. A truck carrying two tanks of anhydrous ammonia crashed 
and flipped April 12, spilling the chemical onto the northbound lanes of Highway 79 in 
Henry County. The roadway was closed for nearly an hour and two nearby homes were 
evacuated as a precaution while crews worked to clean the spill. 

Source: http://www.wbbitv.com/news/local/Homes-in-Henry-Co-Evacuated-after— 
255050801.html 
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Nuclear Reactors, Materials, and Waste Sector 
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6. April 11, South Jersey Times - (New Jersey) Salem 1 nuclear reactor restarted in 
Lower Alloways Creek after pump problem resolved. The Salem 1 reactor at the 
PSEG Nuclear power plant in Lower Alloways Creek Township returned to service 
April 1 1 after being shut down April 8 when a steam generator feed pump failed. 
Source: http://www.ni.com/salem/index.ssf/2014/04/salem 1 nuclear reactor restarted 
after pump problem resolved.html 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

7. April 12, Softpedia - (International) Nine people accused of stealing millions of 
dollars with Zeus malware. The U.S. Department of Justice unsealed an indictment 
against nine individuals for allegedly being involved in a criminal organization that 
used the Zeus banking trojan to steal millions of dollars. The alleged scheme used Zeus 
to steal account information and then transfer stolen money to accounts belonging to 
‘mules’ who withdrew and transferred the money. 

Source: http://news.softpedia.com/news/Nine-People-Accused-of-Stealing-Millions-of- 
Dollars-with-ZeuS-Malware-4373 1 1 .shtml 

8. April 11, U.S. Securities and Exchange Commission - (International) SEC charges 
Indiana man for defrauding investors in “credit union” Ponzi scheme. The U.S. 
Securities and Exchange Commission filed charges April 1 1 against an Indianapolis 
man and two entities under his control for allegedly running a Ponzi scheme that 
defrauded around 5,000 investors from the U.S. and abroad of around $12.8 million 
dollars. Criminal charges were also unsealed by the U.S. Attorney’s Office for the 
Eastern District of Virginia in a parallel action. 

Source: http://www.sec.gov/litigation/litreleases/2014/lr22972.htm 
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Transportation Systems Sector 
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9. April 14, WD1V 4 Detroit - (Michigan) 1 killed in Southfield Freeway crash early 
Monday morning. Southbound lanes of the Southfield Freeway at Grand River in 
Detroit were closed for nearly 3 hours April 14 after a motorcyclist was killed when he 
rear-ended a semi-truck. 

Source: http://www.clickondetroit.com/news/southbound-southfield-freeway-closed- 
due-to-deadly-motorcycle-accident/25462594 

10. April 14, WNEM 5 Bay City - (Michigan) 1-75 will be shutdown to work on damaged 
lines. Officials shut down north and southbound lanes of Interstate 75 at Dort Highway 
in Genesee County April 14 to repair poles and power lines damaged during storms the 
weekend of April 12. The Dort Highway extension to 1-75 remained closed after 
authorities previously closed several portions of the interstate due to the strong storms. 
Source: http ://w w w . wnem.com/story/25240708/i-7 5- will-be- shutdo wn-to- work-on- 
damaged-lines 

11. April 14, Tulsa World - (Oklahoma) FAA: Pilot reported engine trouble before 
plane crash near Lake Tenkiller. Two men were hospitalized April 12 when a single- 
engine plane crashed near Lake Tenkiller in Oklahoma. The Federal Aviation 
Administration is investigating the incident and stated that the pilot reported an engine 
issue prior to the crash. 

Source: http://www.tulsawoiid.com/news/local/faa-pilot-reported-engine-trouble- 
before-plane-crash-near-lake/article 8ba4a3fb-8bbO-59de-85ed-b3ablaa76686.html 

12. April 14, KXAS 5 Fort Worth - (Texas) One killed in small plane crash in Denton. 
One passenger was killed and two others were hospitalized after a small plane crashed 
April 12 while the pilot was attempting an emergency landing in Denton due to a 
mechanical failure. High winds caused the single-engine aircraft to crash near the 
airport. 

Source: http://www.nbcdfw.com/news/local/Small-Plane-Crash-in-Denton-l-Dead- 
255061331.html 



13. April 13, CNN - (International) Cruise ship passengers sickened on luxury liners. 
The U.S. Centers for Disease Control and Prevention is investigating after Royal 
Caribbean’s Grandeur of the Seas had two back-to-back outbreaks of illness, primarily 
with vomiting and diarrhea, affecting more than 100 people in both instances in April. 
A third outbreak affected Princess Cruise’s Crown Princess during its week-long cruise 
ending April 12 impacting 152 passengers and crew. 

Source: http://www.cbs58.com/news/national-news/Cruise-ship-passengers-sickened- 
on-luxury-liners-255080461.html 

14. April 12, KERO 23 Bakersfield - (California) Gas truck on fire closes Highway 99 in 
both directions. Several portions of Highway 99 in Bakersfield were closed after an 
April 12 accident involving a semi-truck carrying gas that rolled onto its side and 
caught on fire. Northbound and southbound lanes at State Route 65 reopened after 
more than 9 hours while a portion of the highway in Lerdo remained closed. 

Source: http://www.tumto23.com/news/local-news/gas-truck-on-fire-closes-highway- 
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99-in-both-directions-04 1214 



For another story, see item 32 
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Food and Agriculture Sector 

15. April 12, Reuters - (New York) Diners in hepatitis A scare at suburban New York 
restaurant. Rockland County health officials warned people who ate or who were 
working at La Fontana restaurant in Nyack, New York, between March 19 and April 1 
that they may have been exposed to hepatitis A after a food handler at the restaurant 
was found to have the disease. Authorities advised diners and employees who have not 
previously been vaccinated to obtain a vaccination. 

Source: http://www.reuters.com/article/2014/04/12/us-usa-new-vork-hepatitis- 
idUSBREA3B0C820140412 



16. April 11, Food Safety News - (Colorado) Illness outbreak investigated at Colorado 
health fair. Rio Grande County health officials are investigating a gastrointestinal 
outbreak among attendees of the 9Health Fair in Monte Visto, Colorado, April 5 after 
30 people reported being sickened. 

Source: http://www.foodsafetynews.com/2014/04/illness-outbreak-investigated-at- 
colorado-health-fair 



17. April 11, Food Safety News - (Minnesota) Dinner rolls likely source of Salmonella 
illnesses linked to Minnesota restaurant. An investigation by Minnesota health 
officials determined that an outbreak that sickened 36 patrons of an Old County Buffet 
in Maple Grove was linked to dinner rolls that were likely cross-contaminated with 
Salmonella Enteritidis from raw chicken used in the restaurant. 

Source: http://www.foodsafetvnews.com/2014/04/dinner-rolls-likely-source-of- 
salmonella-illnesses-at-minnesota-restaurant 
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Water and Wastewater Systems Sector 

18. April 14, Franklin News-Post - (Virginia) Water advisory lifted for Pigg River after 
spill. The Fran kl in County Health Department lifted a notice asking residents to avoid 
recreational use of the Pigg River April 14 after 30,000 gallons of cow manure spilled from 
a holding lagoon into a tributary that feeds into the river the week of April 7. 

Source: http://www.thefranklinnewspost.com/article.cfm?ID=27136 

19. April 12, KDKA 2 Pittsburgh - (Pennsylvania) Repairs continue, boil water advisory 
lifted after water main break. The Pittsburgh Water and Sewer Authority worked to 
make repairs after a 60-inch water main broke April 11 in Sharpsburg, causing Aspinwall 
Borough residents and the Water Works Mall to be placed under a boil water advisory that 
was in effect until April 13. 
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Source: http://pittsburgh.cbslocal.com/2014/04/12/repairs-continue-boil-water-advisory- 
still-in-effect-after-water-main-break/ 



For additional stories, see items 4 and 39 
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Healthcare and Public Health Sector 

20. April 14, Associated Press - (Florida) 8 Florida patients arrested in Medicare scam. 
Federal officials reported that 8 Florida seniors were indicted for their alleged roles in a 
$12.5 million Medicare home health scheme in which the defendants received 
kickbacks for pretending to be patients. 

Source: http://www.sunherald.com/2014/04/14/54942Q2/8-florida-patients-arrested- 
in.html 



21. April 11, Lubbock Avalanche-Journal - (Texas) Lubbock Cardiology Clinic 

advertises security breach in electronic health records. Lubbock Cardiology Clinic 
in Texas announced April 1 that more than 1,400 patients’ medical records, which 
included personal information, were affected in a security breach of its Electronic 
Health Records system after an individual gained unauthorized access December 30, 
2013 to January 30, 2014. 

Source: http://lubbockonline.com/local-news/2014-04-10/lubbock-cardiology-clinic- 
advertises-security-breach-electronic-health-records 
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Government Facilities Sector 

22. April 14, KXI1 12 Sherman - (Oklahoma) Storms cause damage in Bennington, OK. 
Bennington Schools in Oklahoma were closed April 14 due to a power outage caused 
by severe storms that produced strong winds April 13. 

Source: http://www.kxii.com/news/headlines/Storms-cause-damage-in-Bennington- 
OK-255119461.html 

23. April 14, Lexington Herald-Leader - (Kentucky) Forest fire closes state park in 
eastern Kentucky. Kentucky Department of Parks officials closed Kingdom Come 
State Park in Harlan and Letcher counties April 13 due to a forest fire and high winds. 
The park will be closed at least through April 14 while firefighters work to contain the 
blaze which burned about 200 acres of park land. 

Source: http://www.kentuckv.com/2014/04/13/319458Q/forest-fire-closes-state- 
park.html 

24. April 11, Fort Wayne Journal Gazette - (Indiana) Squirrel causes $300,000 damage 
at McMillen Park. McMillen Community Center in McMillen Park in Fort Wayne 
suffered about $300,000 worth of damage after a squirrel got into the electrical system 
and caused a massive power surge that fried three HVAC systems and damaged parts 
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of the boiler room. The new facility is still scheduled to open as planned June 7. 
Source: http://www.iournalgazette.net/article/2014041 l/LQCAL/3041 19963 



Emergency Services Sector 

25. April 12, Associated Press - (Washington) 7-hour Washington 911 outage blamed 
on vendor. Century Link reported April 11 that a 7 hour Statewide 9-1-1 service outage 
in Washington April 10 was caused by a technical error by a third-party vendor. 

Source: http ://www .j acksonsun.com/vie wart/20 1 404 1 2/NEWS/ 1 404 1 2004/7 -hour- 
W ashington-9 1 1 -outage-blamed- vendor- 
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Information Technology Sector 

26. April 14, IDG News Service - (International) Akamai admits issuing faulty OpenSSL 
patch, reissues keys. Akamai Technologies stated April 13 that a patch issued by the 
company designed to protect its customers from the Heartbleed vulnerability contained 
a fault, making it ineffective. The company then began reissuing all Secure Sockets 
Layer (SSL) certificates and security keys for affected sites. 

Source: http://www.computerworld.com/s/article/9247650/Akamai admits issuing faul 
ty OpenSSL patch reissues keys 

27. April 14, Help Net Security - (International) Jetpack pushes update to close critical 
security hole. The creators of the Jetpack plugin for WordPress published an update for 
the popular plugin that closes a vulnerability discovered during a security audit that 
could allow an attacker to bypass a site’s access controls. 

Source: http://www.net-security.org/secworld.php?id=16683 

28. April 12, Softpedia - (International) Google rewards experts for XXE vulnerability 
in Toolbar Button Gallery. Google awarded two Detectify researchers $10,000 after 
they identified and reported an XML External Entity (XXE) vulnerability in the Google 
Toolbar Button Gallery that could have allowed an attacker to gain access to data on the 
company’s production servers. The vulnerability was closed soon after being reported. 
Source: http://news.softpedia.com/news/Google-Rewards-Experts-for-XXE- 
Yulnerabilitv-in-Toolbar-Button-Gallery-437290.shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-ccrt.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



29. April 12, KSTU 13 Salt Lake City - (Utah) Damages from outage-causing car crash 
estimated at more than $100,000. Weber County residents suffered over a 9 hour 
Comcast Internet service outage April 12 after a fiber line was impaired when a car hit 
a power line, causing more than $100,000 worth of damage to the provider’s resources. 
Source: http ://fox 1 3no w . com/20 1 4/04/ 1 2/car-crash-causes -po wer-outage-in- weber- 
county/ 

For another story, see item 25 
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Commercial Facilities Sector 

30. April 14, Associated Press - (Kansas) Official IDs supremacist as Kansas attacks 
suspect. Police arrested and charged a suspect believed to be responsible for opening 
fire and killed three individuals April 13 outside of the Jewish Community Center of 
Greater Kanas City, then again outside the Village Shalom Jewish retirement 
community in Overland Park. Three individuals were killed during the attacks. 

Source: http://news.msn.com/crime-iustice/official-ids-suprernacist-as-kansas-attacks- 
suspect 

31. April 14, KPTV 12 Portland - (Oregon) Crystal Ballroom evacuated during concert. 
More than 1,000 patrons of the Crystal Ballroom in Portland were evacuated as a 
precaution April 13 due to a damaged support beam in the venue. 

Source: http://www.kptv.com/storv/25238394/crystal-ballroom-evacuated-during- 
concert 

32. April 13, KGO 7 San Francisco - (California) 5-alarm fire destroys multiple 
businesses in Berkeley. A 5-alarm fire that broke out April 12 at a commercial 
building in Berkeley destroyed or damaged several businesses, and knocked out power 
to 1,500 PG&E customers, prompting the evacuation of nearby businesses and 
residents. The blaze caused significant traffic delays in both directions along Interstate 
80 and service at two local Amtrak stations was halted due to fire hoses being run 
across the tracks. 

Source: http://abclocal.go.com/kgo/storv?section=news/local/east bay&id=9501921 

33. April 13, KEPR 19 Pasco - (Washington) Toyota Center evacuated due to ammonia 
leak. An ammonia leak at the Toyota Center in Kennewick prompted the evacuation of 
hundreds of people attending an event at the venue April 13. Crews ventilated the 
building and were searching for the source of the leak, with plans to reopen the facility 
April 14. 

Source: http://www.keprtv.com/news/local/Toyota-Center-evacutated-due-to-ammonia- 
leak-255 107 101 .html 

34. April 13, News 12 Bronx - (New York) Homeless shelter evacuated after manhole 
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explosion on Crotona Avenue in Belmont. A manhole explosion and high carbon 
monoxide levels forced more than 50 people to evacuate the Thorpe Family Residence 
homeless shelter in the Brooklyn area of New York City April 13. Con Edison crews 
responded to the incident. 

Source: http://bronx.newsl2.com/news/homeless-shelter-evacuated-after-manhole- 
explosion-on-crotona-avenue-in-belmont- 1.7691866 

35. April 12, St. Louis Post-Dispatch - (Missouri) Edward Jones Dome evacuated for 
natural gas or propane odor. About 12,000 convention attendees were evacuated 
from the Edward Jones Dome in St. Louis April 1 1 after a natural gas or propane odor 
was detected inside the venue. Gas service was shut off while crews worked to locate 
the source of the odor, and two individuals were treated at the scene. 

Source: http://www.stltodav.com/news/local/crime-and-courts/edward-iones-dome- 
evacuated-for-natural-gas-or-propane-odor/article ad999a9d-8abl-5ef5-9478- 
357d7ebd8416.html 



36. April 12, Reuters - (New York) N.Y. jewelry robber ties up worker, flees with 
$54,000 in jewelry. Police are searching for a man who tied up an employee of the 
Margo Manhattan jewelry store in the Manhattan area of New York City April 1 1 and 
stole $54,000 of jewelry from the store. 

Source: http://www.reuters.com/article/2014/04/12/us-usa-new-york-robbery- 
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37. April 12, WBOC 16 Salisbury - (Maryland) Salisbury Walmart cleared after bomb 
threat. Authorities are investigating after a bomb threat was phoned into a Walmart in 
Salisbury April 12, prompting the store to evacuate and close for about 4 hours. Police 
searched and cleared the scene April 13 after no explosive device was found. 

Source: http://www.wboc.com/storv/25233115/salisburv-walmart-evacuated-for-bomb- 
threat 



38. April 11, Dallas Morning News - (Texas) Dallas Fire-Rescue battles 3-alarm blaze 
at apartments near White Rock Lake. A 3 -alarm fire broke out April 1 1 at the 
Winsted Apartments complex in Lakewood, leaving about 40 residents displaced and 
causing an estimated $250,000 in damage. Dallas Fire-Rescue officials determined that 
the cause of the fire was the careless use of a welding torch by workers performing 
maintenance on the building’s roof. 

Source: http://thescoopblog.dallasnews.com/2014/Q4/dallas-fire-rescue-battles-3-alarm- 
blaze-at-apartment-complex-near-white-rock-lake.html/ 

39. April 11, Hagerstown Morning Herald - (West Virginia) Falling Waters, W.Va., 
retreat to pay environmental violations fines for wastewater-treatment plant. 
Potomac Park Camp Inc., entered into a $14,380 settlement with the West Virginia 
Department of Environmental Protection April 10 to resolve environmental violations 
at a wastewater-treatment plant located on its Potomac Park Retreat & Conference 
Center in Falling Waters. 

Source: http://www.heraldmailmedia.com/news/tri state/west virginia/falling-waters- 
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w-va-retreat-to-pay-environmental-violations-fines/article 07d61b46-cld8-lle3-al6d- 
0017a43b2370.html 



For another story, see item 19 
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Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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